JP4879823B2 - Supervisory control system - Google Patents

Description

  The present invention relates to a distributed monitoring and control system in which a main computer and a console in a normal mode and a standby mode are connected via a network. In particular, the normal mode and the standby mode perform state monitoring with each other, and appropriate normal / standby operations are performed. The present invention relates to a monitoring control system that can be switched.

  Conventionally, with the development of IP (Internet Protocol) technology, the demand for supervisory control using IP technology has also increased in the field of supervisory control of power systems, and how to construct a regular / standby system associated therewith has become a problem. ing.

  For example, in Patent Literature 1, when a failure of the own device is detected and the function is stopped in each of the active parent station device and the standby parent station device installed remotely through the network, or in the other parent station device When a failure is detected, a failure occurs via a network between the switching means that opens or pulls the transmission path between the own device and the slave station, and the distributed master station device and standby master station device. Means for transmitting / receiving information, and means for selecting whether or not to maintain the transmission route of the active master station device when the standby master station device detects a failure of the active master station device. There has been proposed a power system monitoring control system in which the switching means is switched so that monitoring control data can be transmitted and received via a selected transmission route.

The power system monitoring and control system described above determines whether or not the normal system or the standby system has an abnormality in its own system, and when an abnormality is detected, transmits and receives failure information via the network, switches the transmission route, etc. The processing is performed.
JP 2004-112246 A JP 2005-222230 A JP 2003-229880 A

  However, if only failure information is exchanged between the normal system and the standby system, failure information cannot be transmitted and received when the network is broken, and it is not possible to accurately determine the abnormality of the other system. For this reason, when a network communication failure occurs, a manual response is required. Alternatively, if the system is automatically switched when a communication failure occurs, there is a possibility that inconsistency occurs in which both systems are in the normal mode or both systems are in the standby mode.

  The present invention has been made in view of the above-described circumstances, and improves reliability in system switching, and when status information such as failure information between the active system and the standby system cannot be transferred due to a network communication failure or the like. Another object of the present invention is to provide a supervisory control system capable of appropriately performing normal / standby switching.

  In order to achieve the above object, a monitoring control system according to the present invention includes a plurality of main computers having an operation mode including a normal mode and a standby mode, and one or more operations connected to each main computer via a network. A monitoring control system having a console and a system monitoring device that is provided corresponding to each main computer and outputs an operation mode transition command for determining an operation mode to each main computer, wherein the main computer Means for inputting MP connection state information indicating a connection state between the console and another system main computer from the console via a network;

  The system monitoring device is configured to input console connection status information indicating a connection status between the main computer and the console from a corresponding main computer, means for inputting the MP connection status information input by the main computer, and dedicated communication. The system management information of the main computer of the other system is obtained by exchanging system management information including the operation mode and failure information of each main computer by connecting to the system monitoring device of the other system by the inter-system link means which is a line. Based on the input means, the input console connection status information, the MP connection status information, and the system management information, it is determined whether to change the operation mode, and an operation mode transition command is issued based on the determination result. And each main computer operates in an operation mode based on an operation mode transition command output from a corresponding system monitoring device. That.

  In the present invention, not only the failure information is exchanged between the main system and the standby main computer, but also the operation state of the operation console, which is a higher-level device, and the connection state between each main computer are considered. Determine whether to change the mode. As a result, for example, in the event of a network failure or overload at the main computer or console application level, the normal system may not become a serious failure, and the system monitoring device may not be able to detect a failure of the normal system. Even in such a case, the standby system can be changed to the regular system. Further, when the standby system makes a mode transition to the regular system, intersystem link means requests the regular system to transition to the standby mode to prevent system mismatch.

  The supervisory control system according to the present invention is further characterized in that when the intersystem link means fails, system management information is transmitted to the system supervisory device of another system via each main computer and the network. .

  In the present invention, during normal times, system management information and MP connection status information can be transmitted by different routes, so that it is possible to determine whether the cause of the connection failure is in the main computer or in another network or main computer On the other hand, when the inter-system link means fails, the operating rate of the normal / standby mode transition function is improved by transmitting system management information via the network. Preferably, when an intersystem link failure is detected, an alarm is output to lead to repair, thereby further improving the operating rate.

Further, in the monitoring control system according to the present invention, the system monitoring device is based on the first determination means for determining the operation status of the normal system based on the MP connection status information and the console connection status information. When the second determination means for determining whether or not the standby system can be changed to the normal mode and the own system is in the standby mode, when at least one of the following conditions (1) to (3) is satisfied: Means for outputting a transition command to the normal mode to the main computer and transmitting a transition request to the standby mode to another system;
(1) Predetermined failure information of another system is “present” based on the system management information,
(2) According to the system management information, the failure information of the other system is “none”, the determination result of the first determination means is “abnormal operating status of normal system”, and the determination result of the second determination means is "Transition to standby mode of normal mode is possible",
(3) When there is no notification of system management information due to a line disconnection or other factors, the determination result of the first determination unit is “abnormal operating system abnormality” and the determination of the second determination unit The result is "Possible to enter standby mode in normal mode",
In the case where the own system is in the normal mode, there is provided a means for outputting a transition command to the standby mode to the main computer when a request for transition to the standby mode sent from another system is received. And

  In the present invention, not only in the case of (1), which is a normal determination condition, there is a problem in system operation even when the other system is not out of order or when other system management information cannot be input due to line disconnection. A mode transition can be executed by detecting a state.

  Further, in the supervisory control system according to the present invention, each main computer is further divided into a plurality of control station function units, and each system function is assigned a normal mode or a standby mode, and the system monitoring means Is characterized by determining whether or not to change the operation mode for each control station function.

  In the present invention, a main computer is not provided for each control station, but a plurality of control center functions are incorporated in one main computer, and operation mode transition is executed independently for each control station.

  In the monitoring control system according to the present invention, the system management information further includes a CPU load of the main computer, and the system monitoring means sets the priority of operation mode transition for each control center function of the main computer, and the normal mode When the difference in CPU load between the two main computers in the standby mode and the standby mode exceeds a predetermined value, a mode transition is executed for each control center function based on the priority.

  In the present invention, the operation mode of the control center function is switched according to the CPU load of both the normal and standby main computers so as to maintain a constant load balance. As a result, a system can be constructed using a computer having a low processing capacity as compared with a method of switching between normal use / standby in units of main computers.

  In this case, it is preferable to assign each main computer so that geographically separated control stations or scales are almost uniform. It is possible to prevent a load from being concentrated on one main computer against a state change caused by a typhoon or an earthquake.

  The above is a method of switching the normal / standby of the main computer depending on the relationship between the main computer of the control center and the upper console. The connection status information between the information collection / distribution apparatus and the upper-level main computer can also be switched by the same process. In this case, the main computer described above is replaced with an information collection and distribution device, and the console is replaced with a main computer.

  According to the present invention, since the operation mode transition is executed based on the failure information of the normal system and the standby system, as well as the connection state between the two systems and the console, etc., occurrence of inconsistency between the normal system and the standby system is reduced. be able to. Even if failure information of another system cannot be input due to a communication failure, the standby system can normally transition to the normal system by inputting connection state information with the normal system from the console.

<First embodiment>
Embodiments of the present invention will be described below. FIG. 1 is a system configuration diagram of a monitoring control system 1 according to the first embodiment.

  Here, the supervisory control system 1 includes a console installed in the control center, a plurality of computers (servers) installed in the control center and provided for each use, and an information collection and distribution device (DX) installed in the control center. , And a telecon (TC) device that is connected to the information collection and distribution device through a transmission line and installed in an electric station. If necessary, the DX at the control station once performs data transmission with the telecon at the electric station via the DX at the control relay station.

  The console installed in the control center and the computer installed in the control center are connected by an IP network for connecting the console, and the information collection and distribution apparatus installed in the computer and the control center is an IP for DX connection. Connected by the net.

Hereinafter, the configuration of FIG. 1 will be described in more detail.
[1. Operation console]

  The console 10 performs monitoring / control work based on the information displayed on the screen based on the monitoring control information transmitted / received to / from the main computers MP-A (21a) and MP-B (21b). The console is installed in each control station, and the configuration and connection of the console for one control station are as shown in FIG. 1, driver 1 (11), driver 2 (12), driver 3 (13). , Operation desk (14) and training desk (15).

  The operator console performs operations such as monitoring and control of the system, the operator console performs operations that do not directly control the system in the operator's office, and the training console performs operation training for control station functions. Perform the function confirmation test separately from the system. In the following description, each of these tables is collectively referred to as a console.

  Each is connected to two local area networks, LAN1 (18) and LAN2 (19), and is connected to an IP network for console connection via routers 16 and 17, and communicates with devices on the control center 1 and 2 side. Do. As for the console connection IP network, it is preferable to use a different IP network for each system.

[2. Control center]
Next, the control center apparatus will be described. The server at the control center is provided independently for each application described below. In FIG. 1, the control center 1 (20a) and the control center 2 (20b) are basically duplex systems having the same configuration. That is, each control center has MP, SIM, SP, and SYC devices, which will be described later, and is connected to an upper console connection IP network or a lower DX connection IP network via a router. In the following description, when it is necessary to distinguish between systems, “-A” and “-B” are added after the symbol of the device “XX” (for example, “MP”). When both systems are common and there is no need to distinguish between the systems, the description will be made by simply indicating “XX”.

(2-1. Device configuration of the control center)
(1) MP (main computer)
The main computer MP (21a, 21b) is a server that performs centralized management of system functions. By transmitting / receiving measurement information, binary information and control information to / from the control station DX (31a, 31b), and transmitting / receiving operation information to / from the console 10, monitoring / control processing of the electric station equipment is performed. The system is configured with two units, and is operated in normal / standby mode. When one side fails, the system is continuously operated by switching the sound system to the normal mode. If necessary, a plurality of units may be provided at each control center. In FIG. 1, one of the main computers MP-A (21a) or MP-B (21b) operates as a normal mode, and the other operates as a standby mode. The main computer in the normal mode performs data equivalence between the two systems by transmitting recording information, setting information from the console 10 and the like to the main computer in the standby mode.

(2) SIM (test / training computer)
The test / training computer SIM (22a, 22b) performs a training function in the training mode in the operation mode and a system testing function in the test mode completely independently of the main computer. Test information is transmitted / received to / from the control station DX (31a, 31b), and operation information for testing is transmitted / received to / from the training table 15.

  The SIM also has a supervisory control function as a spare computer for the main computer MP (21a, 22b). When one system of the main computer fails, the SIM is used / standby with one other main computer. Driving can be continued with a combination of

(3) SP (support computer)
The support computer SP (23a, 23b) is a computer in charge of the support function, and exchanges business data with the main computer MP (21a, 21b) connected via the LAN to execute support work such as operation support and accident support. To do. The support function can also be used from the test / training computer SIM (22a, 22b).

(4) SYC (system monitoring device)
In addition to the main computer MP (21a, 21b), the system monitoring device SYC (24a, 24b) monitors the operating state of each of the computers connected to the same LAN, the computer peripheral device, starts / stops the device, and switches the operation mode. I do.

(2-2. How to monitor the system)
Next, taking a main computer as an example, a method of monitoring by the system monitoring device SYC (24a, 24b) will be described.

(1) When performing data equivalence of the main computers of both systems via the console connection IP network [Connection A]
FIG. 2 shows an example of how to connect each device of the control center, and basically has the same connection form as FIG. This is an example in which data equivalence between both systems is performed via the console connection IP network (2). In the case where the bandwidth can be secured only by the console connection IP network (2), the cost can be suppressed as compared with a method using an intersystem link means (hereinafter simply referred to as intersystem link).

(2) When performing data equivalence between the main computers of both systems via the link between systems [Connection B]
When bandwidth cannot be secured by the console connection IP network, or when reliability is ensured, a separate route from the console connection IP network using the intersystem link shown in FIG. It is good to pass system management information of both systems.

[3. Control station DX (information collection and distribution device)]
The information collection / delivery device DX (31a, 31b) is a device that relays information.
As shown in FIG. 1, measurement information, binary information, etc. are received from the remote monitoring and control device (telecom slave station (TC)) (80) via the control relay station DX (41a, 41b) and transmitted to the control center. The control information from the control center is transmitted to the remote monitoring control device TC (80) via the control relay station DX. The control station DX (31a, 31b) is duplicated and connected to the upper apparatus and the lower apparatus in two series.
The control station DX is installed for each control station.

[4. Example of configuration control]
In the control center, the standby side SYC includes console connection information from the standby side MP (connection state between the console and the standby side MP), system management information from the regular side SYC (MP operation mode, failure information), Further, determination is made based on MP connection state information from the console (connection state between the console and the working side MP), and configuration control such as automatic mode transition at the time of failure is performed.

  When configuration control is performed only with system management information, when the system management information cannot be received due to a network failure or the like, the operating status on the normal side is unknown, so whether or not the standby SYC needs to change to the normal mode. It becomes impossible to judge.

  For this reason, even if the system management information cannot be received by estimating the operation status of the service MP from the connection state information between the console and the service MP, the standby SYC determines the mode transition to the service mode. Will be able to.

(1) Example of information notification method In the case of [Connection A], the system management information is notified via the console connection IP network. In the case of [Connection B], notification is made via an inter-system link, or notification is made via MP and relayed via the console connection IP network.

  The MP connection status information is relayed and notified by the MP via the console connection IP network. The console connection status information is directly notified from the MP to the SYC.

  A schematic flow of notification of system management information and connection status information when the control center 1 side is in regular use and the control center 2 side is in standby is shown in FIGS. (Notification of information notified to SYC-A of the control center 1 is omitted. Also, redundant LAN is omitted.)

  FIG. 4 is a diagram showing the flow of each information in the case of [Connection A]. System management information is transmitted from SYC-A (24a) to SYC-B (24b) via the console connection IP network (2). In addition, MP connection state information indicating the connection state between the normal MP-A (21a) and the console 10 is in a standby state from each driver (11-13) via the console connection IP network (2). It is sent to MP-B (21b), and further sent from MP-B (21b) to SYC-B (24b) through the LAN.

  Further, console connection state information, which is a connection state between the MP-B (21b) and each driver console, is sent from the MP-B (21b) to the SYC-B (24b) through the LAN.

  FIG. 5 is a diagram illustrating a flow of each information when notification is made via an inter-system link in [Connection B]. The difference from FIG. 4 is that system management information is sent from SYC-A (24a) to SYC-B (24b) via an intersystem link. The other information flow is the same as in FIG.

FIG. 6 is a diagram illustrating a flow of each information in [Connection B] when relaying by MP and notifying via the console connection IP network. 4 shows that SYC-A (24a) and SYC-B (24b) are directly connected to the console connection IP network (2), whereas FIG. Data is exchanged with the console connection IP network (2) via -A (21a) and MP-B (21b). Therefore, the system management information is sent in the flow of SYC-A (24a) to MP-A (21a) to the console network IP (2) to MP-B (21b) to SYC-B (24b). .
Note that system management information from standby to regular use is sent in the reverse flow.

(2) Explanation of configuration control procedure (FIG. 7)
A configuration control processing procedure executed by the system monitoring device SYC (24a, 24b) will be described with reference to FIG.

  The configuration control process starts when the own system transitions from the stop to the standby or normal mode. When started, first, it is determined whether or not there is a change in the status of the system management information of the own system and the received MP connection status information, console connection status information, and system management information (S1). In step S1, the state of the line that notifies the system management information is monitored to determine whether the system management information can be received or not. If there is a change in state (“YES” in S1), the processing after the next step S2 is executed. If there is no change, monitoring of the state change is repeated.

  If the system management information can be received in step S2 (“YES” in S2), the process of the next step S3 is executed. When the system management information cannot be received (“NO” in S2), the processes after S4 are executed.

  In step S3, the operation mode transition of the own system is determined based on the system management information (operation mode of other system, failure information), the operation mode of the own system MP, and the own system failure information.

  FIG. 10 shows the conditions for operation mode transition. When the own system is in standby mode and the other system is in normal mode, the transition command to normal mode is supported when the conditions in the column where the SYC determination result is “normal transition” in FIG. Output to MP. At this time, a request for transition to the standby mode is output to another system (ordinary system). As described above, when the system management information can be received, the occurrence status of the failure of the other system is known, so the mode transition is determined by comparing the failure of the own system with the failure of the other system.

When the own system is in the regular mode, when a transition request to the standby mode is received from another system (standby system), a transition command to the standby mode is output to the corresponding MP.
In the comparison between the faults of the other system and the own system, weighting (a numerical value indicating the seriousness of the fault) is determined according to the severity of the fault content, and the numerical value and multiple faults have occurred in the other system and the own system. In this case, the larger total value may be determined as “normal transition”.
An example of setting the fault weighting is shown below.

Abnormal temperature ··· 10 points Program degeneration ··· 4 points Program stop · · · 8 points Program runaway · · · 10 points Table connection · · 3 points per desk

  As step S4, the normal MP operation status is determined based on the determination conditions of FIG. When the own system is on standby, the line connection status (MP connection status information) with the service MP is received from each of the three consoles, the operation status of the service MP is determined, and the result is stored.

When two or more of the three consoles are connected, the operation status of the normal system is normal (OK), and when the number is one or less, the operation status of the normal system is abnormal (NG).
In this example, there are three consoles, but in general, the operating status of the normal system is normal (OK) indicates that the connection with more than half of all the tables can be confirmed. The situation is abnormal (NG) indicates that only less than half of all the tables can be confirmed.

  Next, as step S5, whether or not standby MP regular transition is possible is determined based on the determination condition of FIG. That is, when the own system is on standby, the line connection status (operation console connection status information) with each of the three consoles is received from the standby MP, and whether or not the standby MP can be used for regular transition is determined and the result is stored. As in step S2, in FIG. 9, when two or more of the three consoles are connected, the standby system can be transitioned normally, and when the number of connected consoles is one or less, the standby system transition Impossible.

  Next, as step S6, the operation mode transition of the own system is determined based on each information of the operation mode of the own system MP, the normal MP operation status determination result, and the standby MP normal transition possibility determination result.

  FIG. 11 shows the conditions for operation mode transition. When the own system is in the standby mode, a transition command to the normal mode is output to the corresponding MP when the condition in the column in which the determination result of SYC is “normal transition” in FIG. 11 is satisfied. At this time, a request for transition to the standby mode is output to the other system (ordinary system) via the console connection IP network. As described above, when the system management information cannot be received, the mode transition is determined based on the connection state between both systems and the console.

  When the own system is in the regular mode, when a transition request to the standby mode is received from another system (standby system), a transition command to the standby mode is output to the corresponding MP.

  For both the normal MP operation status determination and standby MP regular transition allowance determination, if both determination results are OK, the determination that the line connection state x is larger is NG, and if both determination results are NG, the line connection state The mode transition determination may be performed by determining that the one with more ○ is OK. (Switch from the console to the one with more MP connections)

  In step S7, it is determined whether or not the own system is in the stop mode. If there is a request for transition to the stop mode in the own system, the process ends. If not, the process returns to the state change monitoring in step S1.

  Through the above processing, it is possible to prevent the operation mode from being used / used regularly and to smoothly switch the mode when the apparatus fails.

[5. System operation at the time of failure]
Hereinafter, the operation of the system at the time of failure will be described for each case.
(5-1. Interlink communication error) (Fig. 12)
When the intersystem link between the control center becomes abnormal in communication, the SYC cannot exchange information through the SYC direct route. However, since MP-A having a normal operation mode exists and there is no problem in connection with the console, the operation of the control station is not affected.

  Because the MP relay route via the console connection IP network can refer to the operation mode of the other MP ([1] to [2]), SYC-B may use the MP-A operation mode regularly. I can confirm. Further, it can be confirmed that the connection between the MP-A and the console is also normal based on the MP connection status information from the console.

  For this reason, unnecessary mode switching is not performed, and the operation mode of both control center MP is not normal / normal.

(5-2. Communication error between MP and console)
The reason for the communication error between the MP and the console is that there is a communication error between the MP in the control center and the IP network for connecting the console, and the communication error between the control console and the IP network for connecting the console. Two patterns can be considered. Hereinafter, each case will be described.

(1) Communication abnormality on the control center side An abnormality occurs between the control center 1 and the console connection IP network, and communication between the normal operation mode MP-A and the console becomes abnormal. In this case, since the console cannot be connected to the MP whose operation mode is regular, the operation of the control station is hindered. (Fig. 13)

  As an operation of the monitoring control system 1, first, the MP-A notifies the SYC-A that a communication abnormality with all the consoles has occurred ([1]). SYC-A notifies SYC-B via the SYC direct route ([2]). SYC-A and SYC-B, after confirming that no similar failure has occurred in MP-B, output a normal / standby switching command for MP-A and MP-B ([3]). The operation mode of MP-A changes from normal to standby, and the operation mode of MP-B changes from standby to normal ([4]). Switch the console connection to MP-B and continue operation of the control station.

(2) Communication error on the control station side An abnormality occurs between the control station and the console connection IP network, and communication between the operation mode MP-A and the console becomes abnormal. In this case, since the operation console cannot be connected to the regular MP, the operation of the control station is hindered. (Fig. 14)

  First, the MP-A notifies the SYC-A that a communication error has occurred with all consoles ([1]). SYC-A notifies SYC-B via the SYC direct route ([2]). MP-B notifies SYC-B that a communication error has occurred with all consoles ([3]). SYC-B notifies SYC-A through the SYC direct route ([4]).

  Since the MPs at both control center cannot connect to the console, SYC does not perform regular / standby switching. Note that there is a difference in the timing at which MP-A and MP-B detect a communication error with the console, so a waiting time for determining switching of the operation mode is provided.

  When this failure occurs, since operation from the control station cannot be performed, it is necessary to perform backup operation from the control relay station.

(3) MP major failure A case where a major failure of the MP-A in which the operation mode is normal occurs will be described with reference to FIG.

  If the normal system becomes a major failure, there will be no MP in the operation mode, which will hinder the operation of the control station.

  In this case, SYC-A detects a serious failure of MP-A and notifies SYC-B of the SYC direct route ([1]). Upon receiving the notification, SYC-B outputs a transition command in the normal mode to MP-B ([2]). Thereby, the operation mode of MP-B changes from standby to normal use ([3]). Switch the console connection to MP-B and continue operation of the control station.

(4) SYC Major Failure A case where a major failure has occurred in the SYC-A of the control center operating in the normal system will be described with reference to FIG.

  In this case, a communication error between SYC occurs in SYC-B. If SYC-A fails, MP-A cannot operate, so the system is automatically stopped ([0]). Therefore, a communication abnormality with MP-A occurs in the console, and a communication abnormality between MPs (via the console connection IP network) occurs in MP-B. Since there is no MP for normal operation mode, the operation of the control station is hindered.

  Each console notifies MP-B that a communication abnormality with MP-A has occurred ([1]), and MP-B relays to SYC-B ([2]). Thereby, SYC-B determines that the operation is not performed at the control station, and outputs a transition command to the normal mode to MP-B ([3]). Thereafter, the operation mode of MP-B transitions from standby to normal use ([4]). Switch the console connection to MP-B and continue operation of the control station.

(5) Base Stop Next, a case where a large-scale disaster occurs in the control center 1 and all base functions stop will be described with reference to FIG.

  In this case, since SYC-A stops, a communication error between SYCs occurs in SYC-B. Since MP-A is also stopped, a communication abnormality with MP-A occurs at the console, and an MP communication abnormality (via the console connection IP network) occurs at MP-B. Since there is no MP whose operation mode is regular, the operation of the control station is hindered.

  At this time, the console notifies MP-B that a communication abnormality with MP-A has occurred ([1]), and MP-B relays to SYC-B ([2]). Thereby, SYC-B determines that the operation is not performed at the control station, and outputs a transition command to the normal mode to MP-B ([3]). Thereafter, the operation mode of MP-B transitions from standby to normal use ([4]). Switch the console connection to MP-B and continue operation of the control station.

  As described above, by using two types of routes, the SYC direct route and the MP relay route, for the communication between SYCs, the operation modes of the MPs at both control center centers do not become a combination of normal / normal for each failure case. Further, the operation can be continued except in the case of communication abnormality between the console and the IP connection for console connection.

  According to the present embodiment, not only based on the failure state of the own system, but also based on the connection status between the other system and the console sent from the console, and the system management information sent from the other system Since it is determined whether or not to change the operation mode, inconsistency in recognition of the system can be prevented and highly reliable switching can be performed.

  In particular, when the system monitoring devices of both systems are connected by an intersystem link, the system management information of the main computer is exchanged with each other. When there is no communication, the system management information is transferred via the console, so that the normal / standby switching can be performed even in the case of a communication failure.

<Second Embodiment>
Next, a second embodiment will be described. In this embodiment, a server is not divided for each control center function, but a plurality of control center functions are provided in a physical server, and regular / standby can be set for each control center function.

FIG. 18 is a configuration diagram illustrating functional division for each control station of the server on the control center center side.
Here, for example, MP-A 1, MP-A 2,... Indicate servers and are physically independent servers.

  For example, MP-A1 has the functions of the control station 1, the control station 2, and the control station 3, indicating that the control station 1 and the control station 3 are in the normal mode and the control station 2 is in the standby mode. In the duplex system, MP-B1, which is a server corresponding to MP-A1, has the opposite setting, and the control station 1 and the control station 3 are in the standby mode, and the control station 2 is in the normal mode.

  Further, the system monitoring device SYC (24a, 24b) stores a load ratio for each of the normal mode and the standby mode, and the normal / standby setting is performed for each control center function based on this ratio.

  The load state of the entire physical server is sent as system management data to the corresponding other server. Then, the system monitoring device adjusts the load balance based on the load ratio between the normal mode and the standby mode when the loads on both servers differ by a predetermined value or more. For example, the system monitoring devices SYC (24a, 24b) are each provided with the load table illustrated in FIG. 19, and the difference in the overall load on the CPUs of the corresponding physical servers (for example, MP-A1 and MP-B1) exceeds a predetermined value. Then, according to the priority order of the load table, the operation mode of the control station with a higher priority that is in the normal mode on the physical server with the higher load is switched. That is, for the control center, the physical server side with a high load is set to the standby mode, and the physical server side with a low load is set to the regular mode.

  It should be noted that the control stations incorporated in the same physical server may be combined based on the size of the region / scale or the operation mode as follows.

(1) Regions Typhoons are a disaster that is likely to cause a heavy load change and a high load on the system. However, the influence of the typhoon is limited when viewed from the entire power supply area, and the control stations other than the affected areas generally have a low load as usual. For this reason, by assigning geographically distant control stations to the same physical server, a high-load control station can use many resources in the event of a typhoon.

(2) Large and small scales One of the processes that become congested between control stations is scheduled processing such as daily and monthly reports that are started at the same time at any control station.

  If a large-scale control center and a small-scale control center are assigned to the same physical server, scheduled processing is started simultaneously at these control stations, but a small-scale control center is compared with a large-scale control center. Finish early. Thereafter, the resources used by the small control station can be dynamically allocated to the large control station. As a result, the scheduled processing is completed earlier than in the case where a plurality of large-scale control stations are assigned to the same physical server.

(3) Operation mode Since the scheduled processing in (2) above does not operate in the standby mode, the operation mode of the control center on the same physical server is controlled by combining the normal mode and the standby mode. Can use a lot of resources. Compared to the case where all the operation modes of the control stations on the same physical server are set to the regular mode, the scheduled processing is completed earlier.

  As described above, according to the present embodiment, one physical server is logically divided and a plurality of control center functions are virtually incorporated, and a plurality of virtual machines (logical servers) are operated in parallel. The number can be reduced.

  In addition, since free resources are automatically allocated to a logical server with a high load, a logical server with a high load uses more resources than a resource obtained by simply dividing the physical server resource by the number of logical servers. Can do.

It is a system configuration figure of supervisory control system 1 by a 1st embodiment of the present invention. It is an apparatus block diagram of the control center 1 (20a) of FIG. (Data equivalence via IP network) It is an apparatus block diagram of the control center 1 (20a) of FIG. (When performing data equivalence via an intersystem link) It is explanatory drawing of the flow of each information in the case of FIG. It is explanatory drawing of the flow of each information in the case of FIG. (Part 1) It is explanatory drawing of the flow of each information in the case of FIG. (Part 2) It is a flowchart of the structure control procedure performed with the system monitoring apparatus (SYC) of FIG. FIG. 8 is a first determination condition table used in the normal MP driving situation determination process (first determination means) in FIG. 7. FIG. FIG. 8 is a second determination condition table used in the standby MP regular transition availability determination process (second determination means) in FIG. 7. FIG. It is an operation mode transition condition table used by the mode transition determination process of FIG. It is an operation mode transition condition table used by the mode transition determination process of FIG. It is explanatory drawing of the system operation | movement at the time of intersystem link communication abnormality. It is explanatory drawing of the system operation | movement at the time of control center center side communication abnormality. It is explanatory drawing of the system operation | movement at the time of control station side communication abnormality. It is explanatory drawing of the system operation | movement at the time of a main use main computer (MP) serious failure. It is explanatory drawing of the system operation | movement at the time of a regular system monitoring apparatus (SYC) serious failure. It is explanatory drawing of system operation | movement when the whole use system control center is stopped. It is a supervisory control system by the 2nd Embodiment of this invention, Comprising: It is a system block diagram of the one server multiple control center form. 19 is a load table provided in the system monitoring devices (SYC) 24a and 24b of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Monitoring and control system 2 IP network for console connection 3 IP network for DX connection 5 Feeding IP network 6 Intersystem link 10 Operation console 11-13 Operation console 14 Operation console 15 Training console 16, 17, 25a, 25b-28a, 28b , 32, 33 Router 18, 19 LAN
20a, 20b Control center 21a, 21b Main computer (MP)
22a, 22b Testing and training computer (SIM)
23a, 23b Support computer (SP)
24a, 24b System monitoring device (SYC)
31a, 31b, ..., 41a, 41b, ... Information collection and distribution device (DX)
80 Remote monitoring and control device (TC)

Claims (5)

A plurality of main computers having operation modes including a normal mode and a standby mode, an operation console composed of a plurality of operation consoles connected to each main computer via a network, and corresponding to each main computer. a monitoring and control system having a system monitoring device that outputs a shift command of the operation mode to determine the operating mode to the main computer,
The main computer includes means for inputting MP connection state information indicating a connection state between the driver console and another main computer from each driver console via the network,
The system monitoring device is
Means for inputting operation console connection status information indicating a connection status between the main computer and each of the operator consoles from the corresponding main computer, and the MP connection status information input by the main computer;
The system of the main computer of the other system is connected to the system monitoring device of the other system by an inter-system link means that is a dedicated communication line, and the system management information including the operation mode and failure information of each main computer is exchanged. Means for entering management information;
Based on the input MP connection status information, if less than half of all consoles are connected to the main computer in the normal mode, it is determined that there is an abnormality in the normal operating status. First determination means;
Second determination means for determining whether or not the standby system can be shifted to the normal mode based on the input console connection state information;
When the own system is in the standby mode, when at least one of the following conditions (1) to (3) is satisfied, a transition command to the normal mode is output to the main computer and the standby mode is set to the other system. Means for sending a transition request to
(1) Predetermined failure information of another system is “present” based on the system management information,
(2) According to the system management information, the failure information of the other system is “none”, the determination result of the first determination means is “abnormal operating status of normal system”, and the determination result of the second determination means is "Transition to standby mode of normal mode is possible",
(3) When there is no notification of system management information due to a line disconnection or other factors, the determination result of the first determination unit is “abnormal operating system abnormality” and the determination of the second determination unit The result is "Possible to enter standby mode in normal mode",
When the own system is in the normal mode, means for outputting a transition command to the standby mode to the main computer when receiving a transition request to the standby mode sent from another system;
With
Wherein each of the main computer, the corresponding monitoring and control system characterized by operating in the operation mode by shift command operation mode which is output from the system monitoring device each.   2. The monitoring control system according to claim 1, wherein when the intersystem link means fails, system management information is transmitted to the system monitoring device of another system via each main computer and the network. Each main computer is divided into a plurality of control center function units, each mode is assigned as a normal mode or a standby mode, and the system monitoring means transitions between operation modes for each control center function. monitoring and control system according to claim 1 or 2, characterized in that the whether the determination. The system management information includes the CPU load of the main computer,
The system monitoring means sets the priority of operation mode transition for each control center function of the main computer, and when the difference in CPU load between the main computer in the normal mode and the standby mode exceeds a predetermined value, the priority 4. The supervisory control system according to claim 3 , wherein the operation mode transition is executed for each control station function based on the order. The supervisory control system has a plurality of main computers each of a normal system and a standby system,
Each main computer, monitoring and control system according to claim 3 or 4, characterized in that the function of geographically distributed control plant is built.